General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Resolved! Security Policy Limit Alarms

I'm trying to setup an alarm to trigger is we have excessive drops on a firewall rule.

When looking at this functionality the Help section states:-

"Use Security Policy Tags to specify the tags for which the rule limit thresholds will generate alarms.

...

GameOver Zeus

Does PaloAlto provide any protection against this malware, either in downloading the virus, making the DNS quesries to the list of .ru domains that the FBI released on June 4th, or in the call backs that it makes?

Panorama - Simple Question

We are currently running Panorama on a VM and need to take it down to add more resources to it. Will taking down Panorama or rebooting it have any affect on connectivity for the 2 PAN's that it manages?

Resolved! On June 5th 2014, the OpenSSL project announced additional vulnerabilities with OpenSSL.

On June 5th 2014, the OpenSSL project announced additional vulnerabilities with OpenSSL.

Dose this vulnerability has any impact on the PanO.S？

For more information about this vulnerability, please see the OpenSSL security advisory.

https://www.opens

...

SSL Decryption Certificate

For SSL Decryption does the cert on the PALO need to be issued from the same enterprise cert chain as the workstations, or does the cert on the workstation have to match the cert on the PALO exactly? We have about 2000 workstations that have been is

...

Device not passing when number of user increased to 100

we are seeing an issue where device is not transferring traffic as the number of internal users increases to 100.

any suggestion friends

Thnx

Satish

Panorama without direct internet connection

Hi,

I have a setup where panorama is not allowed direct internet connection, therefore I would like a setup where a server in a DMZ sone gets the updates from Paloaltonetworks.com and my panorama installation gets the update from that server. Has anyb

...

SSL Decryption Certificate

For SSL Decryption does the cert on the PALO need to be issued from the same enterprise cert chain as the workstations, or does the cert on the workstation have to match the cert on the PALO exactly? We have about 2000 workstations that have been is

...

Resolved! Manual editing an existing PA5000 config for PA7000 migration

Hi guys,

a customer gets a replacment of PA7050 for the PA5000 model they are currently using. Since the PA7k uses the blade slot as reference for the Interfaces my idea was to replace "ethernet1/1" from the PA5k config with "ethernet7/1" and load it

...

Resolved! issue with SSL decrypt-forward proxy

Customer Network configured with SSL decrypt-forward proxy. Now they can't able to browse more sites (eg:birdres.com, sap.snn,etc).

They were not satisfied with exclude ssl decrypt. (due to more no.of sites in exclude list). Is there any other way?

Th

...

Application Groups "service" in security policy

I have the following scenario I came across and just curious if this is expected behavior. It is recommended when "whitelisting" and application to use the application-default service (so it only works on its default port), or if you are "blacklistin

...

Resolved! ports unknown allowed

Hi all,

We have an application group that specifies the applications to allow from untrust to our DMZ. Mostly its just web browsing, ssl, pop and smtp. We are not allowing ms smb port 445 or Port 135 msrpc.

Our recent PCI security scans are telling us

...

Resolved! Switch Ports on HA device

hey

if i configure interface 1,2 to be L2 ports will the passive device allow traffic on those ports?

how to see posted data sent by attackers

Hi..Is there a way to see content of posted data by attacker.For example content of Generic HTTP Cross Site Scripting Attempt or sql injection.Palo alto shows only the name of attack and some information about them

Safe Search Enforcement blocking all Google / Bing / YouTube searches

We enabled Safe Search Enforcement in our URL filter:

but found that all Google / Bing / YouTube searches are all blocked. Users are told to enable Safe Search or strict filtering.

Is this the expected behavior?

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free